Which term describes the mechanism that denies access after multiple failed login attempts?

• A. Account Lockout
• B. Access Token
• C. Account Policy
• D. Access Control List (ACL)

Answer: (A)

Denying access after multiple failed login attempts is account lockout. This mechanism kicks in when a user (or an attacker) tries to guess credentials repeatedly; after a set number of failures, the account is blocked from further login attempts for a period or until an administrator intervenes. The purpose is to stop brute-force or credential-stuffing attacks and protect the account from rapid guessing. After the lockout, normal access is restored only according to the policy, which might involve waiting a predefined duration or having someone unlock the account.

To place this in context, an access token is the credential you receive after successful authentication and is used to access resources. An account policy is the broader set of rules governing how accounts are managed (including lockout thresholds, password requirements, expiration), not the act of denying access itself. An Access Control List (ACL) governs who can access a specific resource, not the process of preventing repeated login attempts.